0000024: New Users are not being created properly through e107 auth.

WoW Raid Manager Defect Tracking System

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0000024

[WoW Raid Manager (WRM)] WRM Users Issues

major

always

2008-07-09 00:23

Reporter

douglasw

View Status

public

Assigned To

douglasw

Priority

high

Resolution

fixed

Status

closed

Product Version

3.2.0

Summary

0000024: New Users are not being created properly through e107 auth.

Description

The "insert" statement that is supposed to properly insert a user into the profile table of WRM has a problem with E107.

110 $sql = sprintf("INSERT INTO " . $phpraid_config['db_prefix'] . "profile VALUES ('$s', '$s', '$s', '$s', '$s')",
111 quote_smart($_SESSION['profile_id']), quote_smart($_SESSION['email']), quote_smart($user_password), quote_smart($user_priv), quote_smart($_SESSION['username']));

Note the use of '$s' instead of '%s' in sprintf. This is causing the information to go into the profile table blank.

Users will experience a large number of blank rows (other than profile ID which should auto-number) in the profile table with e107 auth enabled.

These blank rows are invalid and should be removed and replaced with valid information. HOWEVER this also causes problems with users who have signed up to the raid system with invalid profiles.

The admin should run the following queries to clean up:

SELECT * FROM `phpraid_profile` where username='';

If the above returns no rows then nothing further needs done, if the above does return rows, the admin should run the following three queries on his database and inform users that some signups may have dissappeared and that all users are responsible for logging back into the system and re-checking all of their signups.

delete from `phpraid_signups` WHERE profile_id IN (SELECT profile_id from phpraid_TC_profile where username='');

delete from `phpraid_chars` WHERE profile_id IN (SELECT profile_id from phpraid_TC_profile where username='');

delete from `phpraid_profile` where username='';

The system should self-correct at this point.

Additional Information

Notes
(0000020) douglasw (administrator) 2008-07-09 00:23	Fixed in patch to 3.2.0, added to base code in 3.2.1

Issue History
Date Modified	Username	Field	Change
2008-07-09 00:23	douglasw	New Issue
2008-07-09 00:23	douglasw	Status	new => assigned
2008-07-09 00:23	douglasw	Assigned To	=> douglasw
2008-07-09 00:23	douglasw	Status	assigned => closed
2008-07-09 00:23	douglasw	Note Added: 0000020
2008-07-09 00:23	douglasw	Resolution	open => fixed
2008-07-09 00:23	douglasw	Fixed in Version	=> 3.2.1

Relationships